Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/472a2488-5465-4b11-8a3d-5dc990d29dd5/472a2488-5465-4b11-8a3d-5dc990d29dd5.mft
File:                     472a2488-5465-4b11-8a3d-5dc990d29dd5.mft (raw, json)
Hash identifier:          /M52MQ7C1/Gaqi0m84vmaSSuJTbZbgKPJo/EPC6lfC0=
Subject key identifier:   8D:D0:39:52:33:8D:E4:CA:DB:44:5A:75:28:68:DB:2D:90:6C:4D:18
Authority key identifier: 4B:95:72:F2:D4:4F:1A:3F:46:68:06:7E:41:82:73:59:2C:86:C0:06
Certificate issuer:       /CN=472a2488-5465-4b11-8a3d-5dc990d29dd5
Certificate serial:       010D0C9F43285844BC361725F40A3B27F379BD00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/472a2488-5465-4b11-8a3d-5dc990d29dd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/472a2488-5465-4b11-8a3d-5dc990d29dd5/472a2488-5465-4b11-8a3d-5dc990d29dd5.mft
Manifest number:          010D0C9F4328584073A84FB58169E7D81106DE2D
Signing time:             Wed 31 Jan 2024 11:00:04 +0000
Manifest this update:     Wed 31 Jan 2024 11:00:04 +0000
Manifest next update:     Sat 03 Feb 2024 11:00:00 +0000
Files and hashes:         1: 1f264b32-211e-3446-8e85-f87cadf38b4d.roa (hash: dSHjxLWoQT2pg7vWjy1sRnJENa/tleBwkCJPTD3QiFU=)
                          2: 21a5e779-1be2-35e6-ba98-3c017d76f392.roa (hash: 9mtCG2OQ5TWyaXuKtXcOjdqu/zdL8UFKsqGpqKgeQPA=)
                          3: 472a2488-5465-4b11-8a3d-5dc990d29dd5.crl (hash: b+YFpIn2mh4B3/lrvW47OGg7dyjFxXnKkCh1neJl+is=)
                          4: 6854e10c-22b4-381e-a117-d4ad5c15330f.roa (hash: Gf4IugQpvJnxSYr0W+wZV+kpIazvGuetsmTIX+TVh4I=)
                          5: 6ce4213b-1d38-3496-8379-2b651ece3221.roa (hash: v8fOG5IEE3g9YyArOXQRr5ZLL5niyNQ/YrGt4foFDeU=)
                          6: e3338de1-c785-34b3-8676-6220676a4943.roa (hash: F96PLq9RR6+WLOIdJKAYsjTDR6pybMyejYIK429wclQ=)
                          7: e461f23e-3476-3e07-a653-dcdd0f3aa8a5.roa (hash: LK3P/yGDKh+meIjv3CxKaRbMYvKtfPapqBhtYFgISUg=)
                          8: fe185983-ff6b-3cc5-8184-9a5c1959020b.roa (hash: +44mUrMZHSXZ9sXB2zEGb2vMeafz6aj5SaqCQYyocuU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:bc:36:17:25:f4:0a:3b:27:f3:79:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472a2488-5465-4b11-8a3d-5dc990d29dd5
        Validity
            Not Before: Jan 31 11:00:04 2024 GMT
            Not After : Feb  3 11:00:00 2024 GMT
        Subject: CN=a13a9cad-516e-43e3-abbe-c47241f61f68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6b:61:cf:d4:f7:90:ce:49:57:0e:ea:d2:14:
                    87:d7:55:ab:35:18:99:16:8e:a3:d6:b7:df:12:f0:
                    5c:a3:36:b4:f7:d1:e0:5e:ab:54:c1:80:72:35:1c:
                    27:95:19:af:c2:65:40:4d:ab:dc:94:22:03:b7:3c:
                    34:18:93:f8:4c:e9:04:db:12:46:e8:4a:a4:db:5a:
                    d1:27:66:ed:1b:d2:6f:ea:ff:b6:db:8d:50:5f:4e:
                    3a:39:d6:69:d6:4d:80:9b:08:b2:bd:dd:3e:30:ee:
                    ed:91:4a:15:ea:a0:1d:22:cb:21:df:b1:14:e1:ca:
                    b6:e8:c0:91:cf:c7:a8:18:f5:7d:15:e4:f7:51:25:
                    3e:41:92:40:51:d3:86:3d:11:cc:bd:d7:f5:35:27:
                    6f:7a:db:d2:9a:60:7e:ec:88:c1:9b:40:63:bc:11:
                    c9:ca:c8:3e:5a:bd:a6:f8:a7:a5:54:74:d2:4e:0f:
                    62:74:7b:ee:41:63:a4:dd:55:2f:6e:b2:c6:fd:c3:
                    08:91:23:a5:c9:8e:3c:ab:6d:b7:a0:96:49:b9:4a:
                    1a:9a:69:f7:83:ac:e8:24:4f:eb:99:2c:39:2d:39:
                    bd:b6:16:36:ec:ee:13:d6:d7:a4:2e:b6:1f:4e:57:
                    17:d7:9a:6f:b5:6c:ad:cb:4b:09:10:14:ed:ba:99:
                    60:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:D0:39:52:33:8D:E4:CA:DB:44:5A:75:28:68:DB:2D:90:6C:4D:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/472a2488-5465-4b11-8a3d-5dc990d29dd5/472a2488-5465-4b11-8a3d-5dc990d29dd5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/472a2488-5465-4b11-8a3d-5dc990d29dd5/472a2488-5465-4b11-8a3d-5dc990d29dd5.crl

            X509v3 Authority Key Identifier:
                keyid:4B:95:72:F2:D4:4F:1A:3F:46:68:06:7E:41:82:73:59:2C:86:C0:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/472a2488-5465-4b11-8a3d-5dc990d29dd5.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:13:36:74:e4:2f:5e:96:54:b3:5b:b9:af:a8:9f:3b:fc:bf:
         fe:1f:47:20:df:3a:9a:85:e1:b6:59:4e:82:98:74:64:39:a1:
         01:84:25:c3:ef:3d:c7:0f:7e:b0:4c:8f:ef:2c:e5:eb:57:2a:
         12:d4:0e:34:0d:0e:a4:df:5f:3b:12:6c:75:c0:00:7b:44:e5:
         00:07:33:74:ac:5b:40:ac:65:ca:b5:16:d8:ca:7e:c5:d3:6d:
         bd:c8:75:1f:cb:31:00:0e:66:38:a7:58:12:af:24:9c:b2:97:
         cc:08:10:bc:a7:18:eb:e9:36:86:71:78:95:9e:90:7d:ee:07:
         c2:62:18:07:2b:08:f8:88:e7:4c:78:3f:c2:4e:75:f7:bb:71:
         2d:96:9c:16:77:3b:e5:52:c0:79:1e:87:78:70:1f:f2:3f:10:
         d0:07:10:9f:26:ec:cf:1d:96:23:0b:49:6d:86:d4:3f:89:60:
         cf:fe:c5:46:66:aa:e0:e7:0c:72:38:30:d9:d3:2a:94:db:19:
         f9:bb:9b:57:b5:31:59:5e:06:64:38:92:39:d5:68:c9:ca:6c:
         78:bf:b0:2c:8c:59:b9:c6:77:b4:d9:b8:00:8c:05:ad:23:3a:
         d8:d0:b3:9e:31:c5:be:66:30:56:b1:0b:f9:67:4c:21:bb:0f:
         94:e0:a7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 1 00:36:26 2024 by rpki-client on console-ams.rpki-client.org